Server credentials ...
 
Notifications
Clear all

Server credentials leak

2 Posts
2 Users
0 Reactions
38 Views
(@danijel-tudek)
New Member
Joined: 1 year ago
Posts: 8
Topic starter  

Present in Carbonio 24.12. First reported 3 months ago without feedback: https://community.zextras.com/forum/general-info/jetty-directory-listing-open/

Can someone please check this? This issue means that anyone can grab all these files from anywhere in the world. Every installation of Carbonio could have been compromised with internal credentials being available in plain text to anyone.


   
Quote
(@sharif)
Estimable Member Admin
Joined: 3 years ago
Posts: 635
 

@danijel-tudek

Hi,

I have replied to your other post related to this topic. Feel free to take a look at it.

https://community.zextras.com/forum/postid/9927/

Regards,


   
ReplyQuote